DLINKSW-AAA-SERVER-MIB

File: DLINKSW-AAA-SERVER-MIB.mib (36249 bytes)

Imported modules

SNMPv2-SMI SNMPv2-CONF SNMPv2-TC
INET-ADDRESS-MIB IF-MIB DLINKSW-AAA-COMMON-MIB

Imported symbols

MODULE-IDENTITY OBJECT-TYPE Counter32
Unsigned32 MODULE-COMPLIANCE OBJECT-GROUP
DisplayString RowStatus TEXTUAL-CONVENTION
InetAddressType InetAddress InterfaceIndex
dAaaMIBObjects

Defined Types

DlinkAAAProtocol  
Protocol used with this server. none(0) - No protocol specified, this value is read-only. tacacsplus(1) - TACACS+ radius(2) - RADIUS
TEXTUAL-CONVENTION    
  INTEGER none(0), tacacsplus(1), radius(2)  

DlinkAAAGroupName  
Represents group name. The following name are reserved and cannot be created by user: enable, none, local, tacacs, xtacacs, tacacs+, radius
TEXTUAL-CONVENTION    
  OCTET STRING Size(0..32)  

VrfName  
Represents VRF name.
TEXTUAL-CONVENTION    
  OCTET STRING Size(1..32)  

DasServerConfigEntry  
SEQUENCE    
  dasServerProtocol DlinkAAAProtocol
  dasServerIndex Unsigned32
  dasServerAddrType InetAddressType
  dasServerAddress InetAddress
  dasServerAuthenPort Unsigned32
  dasServerAcctPort Unsigned32
  dasServerKey DisplayString
  dasServerTimeout Unsigned32
  dasServerRetransmit Unsigned32
  dasServerPriority Unsigned32
  dasServerRowStatus RowStatus

DasTacplusStatisticsEntry  
SEQUENCE    
  dasTacplusSocketOpens Counter32
  dasTacplusSocketCloses Counter32
  dasTacplusTotalPktSent Counter32
  dasTacplusTotalPktRecv Counter32
  dasTacplusReferenceCount Counter32

DasGroupEntry  
SEQUENCE    
  dasGroupProtocol DlinkAAAProtocol
  dasGroupName DlinkAAAGroupName
  dasGroupRowStatus RowStatus

DasGroupServerEntry  
SEQUENCE    
  dasGroupSrvIndex Unsigned32
  dasGroupSrvAddrType InetAddressType
  dasGroupSrvAddress InetAddress
  dasGroupSrvPriority Unsigned32
  dasGroupServerRowStatus RowStatus

DasGroupVrfEntry  
SEQUENCE    
  dasGroupVrfName VrfName
  dasGroupVrfConfigRowStatus RowStatus

DasGroupSrcIfEntry  
SEQUENCE    
  dasGroupSrcAddrType InetAddressType
  dasGroupSrcIfIndex InterfaceIndex
  dasGroupSrcIfConfigRowStatus RowStatus

DasClearServerStatEntry  
SEQUENCE    
  dasClearServerStatAction INTEGER

Defined Values

dlinkSwAAAServerMIB 1.3.6.1.4.1.171.14.150.1.2
This MIB provides configuration and statistics reflecting the state of AAA Server operation within the device and AAA communications with external servers. AAA stands for authentication, authorization, and accounting The AAA Server MIB provides the following information: 1) A Table for configuring AAA servers 2) Identities of external AAA servers 3) Distinct statistics for each AAA function 4) Status of servers providing AAA functions A server is defined as a logical entity which provides any of the three AAA functions. A TACACS+ server consists of all three functions with a single IP address and single TCP port. A RADIUS server consists of the authentication/accounting pair with a single IP address but distinct UDP ports, or it may be just one of authentication or accounting. It is possible to have two distinct RADIUS servers at the same IP address, one providing authentication only, the other accounting only. Note: Regarding RADIUS server statistics please refer to RADIUS-AUTH-CLIENT-MIB (RFC2618) and RADIUS-ACCT-CLIENT-MIB (RFC2620)
MODULE-IDENTITY    

dAaaSrvMIBNotifications 1.3.6.1.4.1.171.14.150.1.2.0
OBJECT IDENTIFIER    

dAaaSrvMIBObjects 1.3.6.1.4.1.171.14.150.1.2.1
OBJECT IDENTIFIER    

dAaaSrvMIBConformance 1.3.6.1.4.1.171.14.150.1.2.2
OBJECT IDENTIFIER    

dasConfig 1.3.6.1.4.1.171.14.150.1.2.1.1
OBJECT IDENTIFIER    

dasServerConfigTable 1.3.6.1.4.1.171.14.150.1.2.1.1.1
This table consists of a list of configurations for each AAA server. An entry is created/removed when a new server is created/removed. The following table describes examples of AAA servers. Protocol Index AddressType IPv6Address AuthenPort AcctPort Key Priority ---------- ----- ----------- ------------- ---------- -------- ------ -------- tacacsplus 1 ipv6 2000::2 49 0 1 tacacsplus 2 ipv4 10.0.0.1 49 0 3 tacacsplus 3 ipv4 192.168.1.254 49 0 2 radius 1 ipv4 192.168.1.254 1812 1813 1 radius 2 ipv4 20.0.0.12 1812 1813 2
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    DasServerConfigEntry

dasServerConfigEntry 1.3.6.1.4.1.171.14.150.1.2.1.1.1.1
An entry consists of an AAA server configuration. An entry is created/removed when a server is defined or undefined with configuration commands via CLI or by issuing appropriate SNMP sets. A management station wishing to create an entry should first generate a random number to be used as the index to this sparse table. The station should then create the associated instance of the row status and row index objects. dasServerPriority is automatically assigned once the entry is made active and reflects the relative priority of the defined server with respect to already configured servers. Newly-created servers will be assigned the lowest priority. To reassign server priorities to existing server entries, it may be necessary to destroy and recreate entries in order of priority. Upon reload, dasServerIndex values may be changed, but the priorities that were saved before reload will be retained, with lowest priority number corresponding to the higher priority servers.
Status: current Access: not-accessible
OBJECT-TYPE    
  DasServerConfigEntry  

dasServerProtocol 1.3.6.1.4.1.171.14.150.1.2.1.1.1.1.1
The variable indicates the protocol of the corresponding AAA server.
Status: current Access: not-accessible
OBJECT-TYPE    
  DlinkAAAProtocol  

dasServerIndex 1.3.6.1.4.1.171.14.150.1.2.1.1.1.1.2
A management station wishing to initiate a new AAA server configuration should use a random value for this object when creating an instance of dasServerConfigEntry.
Status: current Access: not-accessible
OBJECT-TYPE    
  Unsigned32 1..4294967295  

dasServerAddrType 1.3.6.1.4.1.171.14.150.1.2.1.1.1.1.3
This object indicates the address type of the AAA server.
Status: current Access: read-create
OBJECT-TYPE    
  InetAddressType  

dasServerAddress 1.3.6.1.4.1.171.14.150.1.2.1.1.1.1.4
The address of the server.
Status: current Access: read-create
OBJECT-TYPE    
  InetAddress  

dasServerAuthenPort 1.3.6.1.4.1.171.14.150.1.2.1.1.1.1.5
UDP/TCP port used for authentication in the configuration For TACACS+, this object should be explicitly set. Default value is 1812 for RADIUS.
Status: current Access: read-create
OBJECT-TYPE    
  Unsigned32 0..65535  

dasServerAcctPort 1.3.6.1.4.1.171.14.150.1.2.1.1.1.1.6
UDP/TCP port used for accounting service in the configuration For TACACS+, the value of dasServerAcctPort is ignored. dasServerAuthenPort will be used instead. Default value is 1813 for RADIUS.
Status: current Access: read-create
OBJECT-TYPE    
  Unsigned32 0..65535  

dasServerKey 1.3.6.1.4.1.171.14.150.1.2.1.1.1.1.7
The server key to be used with this server. The maximum length for RADIUS is 32 characters. The maximum length for TACACS+ is 254 characters. When read, a zero length string will be returned for security reasons.
Status: current Access: read-create
OBJECT-TYPE    
  DisplayString Size(0..254)  

dasServerTimeout 1.3.6.1.4.1.171.14.150.1.2.1.1.1.1.8
The time in seconds for waiting server reply. Default value is 5 seconds.
Status: current Access: read-create
OBJECT-TYPE    
  Unsigned32 1..255  

dasServerRetransmit 1.3.6.1.4.1.171.14.150.1.2.1.1.1.1.9
The retransmit times of requests to the server when no response is received. For TACACS+, the value of dasServerRetransmit is ignored. Default value is 2 for RADIUS.
Status: current Access: read-create
OBJECT-TYPE    
  Unsigned32 0..20  

dasServerPriority 1.3.6.1.4.1.171.14.150.1.2.1.1.1.1.10
A number that indicates the priority of the server in this entry. Lower numbers indicate higher priority.
Status: current Access: read-only
OBJECT-TYPE    
  Unsigned32 1..4294967295  

dasServerRowStatus 1.3.6.1.4.1.171.14.150.1.2.1.1.1.1.99
The status of this entry.
Status: current Access: read-create
OBJECT-TYPE    
  RowStatus  

dasRadiusServerDeadTime 1.3.6.1.4.1.171.14.150.1.2.1.1.2
This variable controls the default duration of time to skip the unresponsive server. The valid range is 0 to 1440 (24 hours). When setting to 0, the unresponsive server will not be marked as dead. The default value is 0.
Status: current Access: read-write
OBJECT-TYPE    
  Unsigned32 0..1440  

dasStatistics 1.3.6.1.4.1.171.14.150.1.2.1.2
OBJECT IDENTIFIER    

dasTacplusStatisticsTable 1.3.6.1.4.1.171.14.150.1.2.1.2.1
This table consists of a list of statistics for each TACACS+ server. The following table describes examples of TACACS+ servers statistics. Protocol Index SocketOpens SocketCloses TotalPktSend TotalPktRecv ReferenceCount ---------- ----- ----------- ------------ ------------ ------------ -------------- tacacsplus 1 1 1 0 0 0 tacacsplus 2 5 5 20 20 5 tacacsplus 3 10 10 25 25 10
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    DasTacplusStatisticsEntry

dasTacplusStatisticsEntry 1.3.6.1.4.1.171.14.150.1.2.1.2.1.1
An entry consists of statistical information about a particular server. Objects in this table are read-only and appear automatically whenever a TACACS+ server in the dasServerConfigTable is made active.
Status: current Access: not-accessible
OBJECT-TYPE    
  DasTacplusStatisticsEntry  

dasTacplusSocketOpens 1.3.6.1.4.1.171.14.150.1.2.1.2.1.1.1
The number of successful TCP socket connections to the TACACS+ server.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

dasTacplusSocketCloses 1.3.6.1.4.1.171.14.150.1.2.1.2.1.1.2
The number of successfully closed TCP socket attempts.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

dasTacplusTotalPktSent 1.3.6.1.4.1.171.14.150.1.2.1.2.1.1.3
The number of packets sent to the TACACS+ server
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

dasTacplusTotalPktRecv 1.3.6.1.4.1.171.14.150.1.2.1.2.1.1.4
The number of packets received from the TACACS+ server.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

dasTacplusReferenceCount 1.3.6.1.4.1.171.14.150.1.2.1.2.1.1.5
The number of packets received from the TACACS+ server.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

dasGroup 1.3.6.1.4.1.171.14.150.1.2.1.3
OBJECT IDENTIFIER    

dasGroupTable 1.3.6.1.4.1.171.14.150.1.2.1.3.1
This table consists of a list of configurations for each AAA server group. An entry is created/removed when a new server group is created/removed. The following table describes examples of AAA groups. Protocol Name ---------- ---------- tacacsplus tac_con tacacsplus tac_telnet radius rad_acct radius rad_ssh
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    DasGroupEntry

dasGroupEntry 1.3.6.1.4.1.171.14.150.1.2.1.3.1.1
An AAA server group configuration identified by its protocol, and its name. An entry is created/removed when a server group is defined or undefined with configuration commands via CLI or by issuing appropriate sets to this table using snmp.
Status: current Access: not-accessible
OBJECT-TYPE    
  DasGroupEntry  

dasGroupProtocol 1.3.6.1.4.1.171.14.150.1.2.1.3.1.1.1
The variable denotes the protocol used by the managed device with the AAA group corresponding to this entry in the table.
Status: current Access: not-accessible
OBJECT-TYPE    
  DlinkAAAProtocol  

dasGroupName 1.3.6.1.4.1.171.14.150.1.2.1.3.1.1.2
The server group name.
Status: current Access: not-accessible
OBJECT-TYPE    
  DlinkAAAGroupName  

dasGroupRowStatus 1.3.6.1.4.1.171.14.150.1.2.1.3.1.1.3
The status of this table entry. Once the entry status is set to active, the associated entry cannot be modified except destroyed by setting this object to destroy(6).
Status: current Access: read-create
OBJECT-TYPE    
  RowStatus  

dasGroupServerTable 1.3.6.1.4.1.171.14.150.1.2.1.3.2
This table consists of a list of configurations for each AAA server group. An entry is created/removed when a new server group is created/removed. The following table describes examples of AAA server groups. Protocol Name SrvIndex AddressType IPv6Address Priority ---------- ---------- -------- ------------- ------------- -------- tacacsplus tac_con 1 ipv6 2000::2 1 tacacsplus tac_telnet 2 ipv4 10.0.0.1 2 tacacsplus tac_telnet 3 ipv4 192.168.1.254 3 radius rad_ssh 1 ipv4 20.0.0.12 1 radius rad_ssh 2 ipv4 20.0.0.13 2 radius rad_ssh 3 ipv4 20.0.0.14 3 radius rad_ssh 4 ipv4 20.0.0.15 4
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    DasGroupServerEntry

dasGroupServerEntry 1.3.6.1.4.1.171.14.150.1.2.1.3.2.1
An AAA server group configuration identified by its protocol, its name and its index. An entry is created/removed when a server group is defined or undefined with configuration commands via CLI or by issuing appropriate sets to this table using snmp. A management station wishing to create an entry should first generate a random number to be used as the index to this sparse table. dasGroupSrvPriority is automatically assigned once the entry is made active and reflects the relative priority of the defined server with respect to already configured servers. Newly-created servers will be assigned the lowest priority. To reassign server priorities to existing server entries, it may be necessary to destroy and recreate entries in order of priority. Upon reload, dasGroupSrvIndex values may be changed, but the priorities that were saved before reload will be retained, with lowest priority number corresponding to the higher priority servers.
Status: current Access: not-accessible
OBJECT-TYPE    
  DasGroupServerEntry  

dasGroupSrvIndex 1.3.6.1.4.1.171.14.150.1.2.1.3.2.1.1
A management station wishing to initiate a new AAA server group configuration should use a random value for this object when creating an instance of dasGroupEntry. The RowStatus semantics of the dasGroupConfigRowStatus object will prevent access conflicts.
Status: current Access: not-accessible
OBJECT-TYPE    
  Unsigned32 1..4294967295  

dasGroupSrvAddrType 1.3.6.1.4.1.171.14.150.1.2.1.3.2.1.2
This object indicates the type of network address denoted in dasGroupSrvAddress object.
Status: current Access: read-create
OBJECT-TYPE    
  InetAddressType  

dasGroupSrvAddress 1.3.6.1.4.1.171.14.150.1.2.1.3.2.1.3
The address of the server of the entry.
Status: current Access: read-create
OBJECT-TYPE    
  InetAddress  

dasGroupSrvPriority 1.3.6.1.4.1.171.14.150.1.2.1.3.2.1.4
A number that indicates the priority of the server in this group. Lower numbers indicate higher priority.
Status: current Access: read-only
OBJECT-TYPE    
  Unsigned32 1..4294967295  

dasGroupServerRowStatus 1.3.6.1.4.1.171.14.150.1.2.1.3.2.1.5
The status of this table entry. Once the entry status is set to active, the associated entry cannot be modified except destroyed by setting this object to destroy(6).
Status: current Access: read-create
OBJECT-TYPE    
  RowStatus  

dasVrf 1.3.6.1.4.1.171.14.150.1.2.1.4
OBJECT IDENTIFIER    

dasGroupVrfTable 1.3.6.1.4.1.171.14.150.1.2.1.4.1
This table shows current VRF configurations for each AAA server group, allows existing VRF to be removed and new ones to be created. The following table describes the examples of VRF setting for AAA server groups. Protocol group Name VRF name ---------- ---------- ---------- tacacsplus tac_con vrf1 tacacsplus tac_telnet vrf_taplus radius rad_acct vrf_radius radius rad_ssh vrf_100
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    DasGroupVrfEntry

dasGroupVrfEntry 1.3.6.1.4.1.171.14.150.1.2.1.4.1.1
An AAA group VRF configuration identified by its protocol and its group name. An entry is created/removed when a VRF setting is defined or undefined with configuration commands via CLI or by issuing appropriate sets to this table using snmp. When a group VRF configuration is deleted, indicates the server group will use the global (default) routing table.
Status: current Access: not-accessible
OBJECT-TYPE    
  DasGroupVrfEntry  

dasGroupVrfName 1.3.6.1.4.1.171.14.150.1.2.1.4.1.1.1
The VRF name of the entry.
Status: current Access: read-create
OBJECT-TYPE    
  VrfName  

dasGroupVrfConfigRowStatus 1.3.6.1.4.1.171.14.150.1.2.1.4.1.1.2
The status of this table entry.
Status: current Access: read-create
OBJECT-TYPE    
  RowStatus  

dasSrcIf 1.3.6.1.4.1.171.14.150.1.2.1.5
OBJECT IDENTIFIER    

dasGroupSrcIfTable 1.3.6.1.4.1.171.14.150.1.2.1.5.1
This table consists of a list of source interface configurations for each AAA server group.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    DasGroupSrcIfEntry

dasGroupSrcIfEntry 1.3.6.1.4.1.171.14.150.1.2.1.5.1.1
An AAA group source interface configuration identified by its protocol and its group name. An entry is created/removed when a source interface setting is defined or undefined with configuration commands via CLI or by issuing appropriate sets to this table using snmp. Note: The group name of radius and tacacs+ are reserved group names and its corresponding source interface is global setting for RADIUS and TACACS+ servers respectively. If both global and group-specific have the source interface settings, the setting of group-specific takes precedence.
Status: current Access: not-accessible
OBJECT-TYPE    
  DasGroupSrcIfEntry  

dasGroupSrcAddrType 1.3.6.1.4.1.171.14.150.1.2.1.5.1.1.1
This object indicates the type of the address which will be used as source address for sending RADIUS packets.
Status: current Access: not-accessible
OBJECT-TYPE    
  InetAddressType  

dasGroupSrcIfIndex 1.3.6.1.4.1.171.14.150.1.2.1.5.1.1.2
This object indicates the ifIndex of the interface whose IP/IPv6 address will be used as source IP/IPv6 address for sending RADIUS packets.
Status: current Access: read-create
OBJECT-TYPE    
  InterfaceIndex  

dasGroupSrcIfConfigRowStatus 1.3.6.1.4.1.171.14.150.1.2.1.5.1.1.3
The status of this table entry.
Status: current Access: read-create
OBJECT-TYPE    
  RowStatus  

dasClear 1.3.6.1.4.1.171.14.150.1.2.1.6
OBJECT IDENTIFIER    

dasClearServerStatTable 1.3.6.1.4.1.171.14.150.1.2.1.6.1
This table is used to clear statistics of the AAA servers.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    DasClearServerStatEntry

dasClearServerStatEntry 1.3.6.1.4.1.171.14.150.1.2.1.6.1.1
An entry which can be used to clear the statistics of the AAA server.
Status: current Access: not-accessible
OBJECT-TYPE    
  DasClearServerStatEntry  

dasClearServerStatAction 1.3.6.1.4.1.171.14.150.1.2.1.6.1.1.1
This object is used to clear statistics of an AAA server when set to 'clear'. No action is taken if this object is set to 'noOp'. When read, the value 'noOp' is returned.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER clear(1), noOp(2)  

dasClearServerStatByGroup 1.3.6.1.4.1.171.14.150.1.2.1.6.2
This object is used to clear AAA server statistics based on group name. Setting this object to the group name which you want to clear. When read, a zero length string is returned.
Status: current Access: read-write
OBJECT-TYPE    
  DlinkAAAGroupName  

dasClearServerStatByProtocol 1.3.6.1.4.1.171.14.150.1.2.1.6.3
This object is used to clear AAA server statistics based on protocol. Setting this object to the protocol which you want to clear. When read, none(0) is returned.
Status: current Access: read-write
OBJECT-TYPE    
  DlinkAAAProtocol  

dasClearAllServerStat 1.3.6.1.4.1.171.14.150.1.2.1.6.4
This object is used to clear all AAA server statistics when set to 'clear'. No action is taken if this object is set to 'noOp'. When read, the value 'noOp' is returned.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER clear(1), noOp(2)  

dasMIBCompliances 1.3.6.1.4.1.171.14.150.1.2.2.1
OBJECT IDENTIFIER    

dasMIBCompliance 1.3.6.1.4.1.171.14.150.1.2.2.1.1
The compliance statement for entities which implement the DLINKSW-AAA-SERVER-MIB.
Status: current Access: read-only
MODULE-COMPLIANCE    

dasMIBGroups 1.3.6.1.4.1.171.14.150.1.2.2.2
OBJECT IDENTIFIER    

dasTacplusStatisticsGroup 1.3.6.1.4.1.171.14.150.1.2.2.2.1
Objects for providing AAA tacacs+ server statistics and status.
Status: current Access: read-only
OBJECT-GROUP    

dasConfigGroup 1.3.6.1.4.1.171.14.150.1.2.2.2.2
Objects for configuring the AAA servers.
Status: current Access: read-only
OBJECT-GROUP    

dasSrvGroupGroup 1.3.6.1.4.1.171.14.150.1.2.2.2.3
Objects for configuring the AAA server groups.
Status: current Access: read-only
OBJECT-GROUP    

dasVrfGroup 1.3.6.1.4.1.171.14.150.1.2.2.2.4
Objects for configuring the AAA VRF setting.
Status: current Access: read-only
OBJECT-GROUP    

dasSrcIfGroup 1.3.6.1.4.1.171.14.150.1.2.2.2.5
Objects for configuring the AAA source interface setting.
Status: current Access: read-only
OBJECT-GROUP    

dasClearStatGroup 1.3.6.1.4.1.171.14.150.1.2.2.2.6
Objects for clear the AAA server statistics.
Status: current Access: read-only
OBJECT-GROUP